Page MenuHomePhabricator
Create Task
Maniphest T265729

decommission cp2003, cp2009, cp2015, cp2021
Closed, ResolvedPublicRequest
Actions

Description

This task will track the decommission-hardware of servers cp2003, cp2009, cp2015, and cp2021.

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

cp2003

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configuration removed from switch once system is unracked.
  • - IF DECOM: mgmt dns entries removed.

cp2009

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks removed (by onsite)
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configuration removed from switch once system is unracked.
  • - IF DECOM: mgmt dns entries removed.

cp2015

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configuration removed from switch once system is unracked.
  • - IF DECOM: mgmt dns entries removed.

cp2021

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place.
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - disable switch port / set to asset tag if host isn't being unracked / remove from switch if being unracked.
  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: switch port configuration removed from switch once system is unracked.
  • - IF DECOM: mgmt dns entries removed.

Details

SubjectRepoBranchLines +/-
Remove cp2 decoms: 3, 9, 15, 12operations/dnsmaster+0 -19
remove refs to decommed cp2 boxes: 3, 9, 15, 21operations/puppetproduction+0 -34
Customize query in gerrit

Event Timeline

BBlack created this task.Oct 16 2020, 2:49 PM
BBlack updated the task description. (Show Details)Oct 16 2020, 2:54 PM
gerritbot added a comment.Oct 16 2020, 3:03 PM

Change 634537 had a related patch set uploaded (by BBlack; owner: BBlack):
[operations/puppet@production] remove refs to decommed cp2 boxes: 3, 9, 15, 21

https://gerrit.wikimedia.org/r/634537

gerritbot added a project: Patch-For-Review.Oct 16 2020, 3:03 PM
gerritbot added a comment.Oct 16 2020, 3:08 PM

Change 634539 had a related patch set uploaded (by BBlack; owner: BBlack):
[operations/dns@master] Remove cp2 decoms: 3, 9, 15, 12

https://gerrit.wikimedia.org/r/634539

ops-monitoring-bot added a comment.Oct 16 2020, 3:11 PM

cookbooks.sre.hosts.decommission executed by bblack@cumin1001 for hosts: cp[2003,2009,2015,2021].codfw.wmnet

  • cp2003.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2009.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2015.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • cp2021.codfw.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • COMMON_STEPS (WARN)
    • Not all affected DC(s) have been migrated to automatic DNS, a manual patch to the operations/dns repository is required
gerritbot added a comment.Oct 16 2020, 3:13 PM

Change 634537 merged by BBlack:
[operations/puppet@production] remove refs to decommed cp2 boxes: 3, 9, 15, 21

https://gerrit.wikimedia.org/r/634537

gerritbot added a comment.Oct 16 2020, 3:14 PM

Change 634539 merged by BBlack:
[operations/dns@master] Remove cp2 decoms: 3, 9, 15, 12

https://gerrit.wikimedia.org/r/634539

BBlack assigned this task to Papaul.Oct 16 2020, 3:15 PM
BBlack updated the task description. (Show Details)
BBlack edited projects, added ops-codfw; removed Patch-For-Review.
Restricted Application added a project: SRE. · View Herald TranscriptOct 16 2020, 3:15 PM
Papaul added a comment.Oct 16 2020, 9:35 PM
[edit interfaces interface-range disabled]
     member ge-1/0/5 { ... }
+    member xe-2/0/6;
[edit interfaces]
-   xe-2/0/6 {
-       description cp2003;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member ge-1/0/9 { ... }
+    member xe-2/0/6;
[edit interfaces]
-   xe-2/0/6 {
-       description cp2009;
-       enable;
-   }
[edit interfaces interface-range disabled]
     member ge-1/0/1 { ... }
+    member xe-2/0/5;
[edit interfaces]
-   xe-2/0/5 {
-       description cp2015;
-       enable;
-   }
edit interfaces interface-range disabled]
     member ge-1/0/5 { ... }
+    member xe-2/0/2;
[edit interfaces]
-   xe-2/0/2 {
-       description cp2021;
-       enable;
-   }
Papaul updated the task description. (Show Details)Oct 16 2020, 9:38 PM
Papaul updated the task description. (Show Details)Oct 16 2020, 9:47 PM
Papaul closed this task as Resolved.Oct 19 2020, 3:43 PM
Papaul updated the task description. (Show Details)

complete

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL